$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa File: 8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa (raw, json) Hash identifier: D6M+5eKS9hqYmrO12DRQ2EeqpOn1DaEcQXKRAMf/Tlc= Subject key identifier: 9D:2A:8D:76:80:AC:C0:0D:F3:69:66:94:B0:D6:A1:9E:0D:64:7C:3D Certificate issuer: /CN=5e2da88f-6029-42b9-b598-2623343a3150 Certificate serial: 010D0C9F4328584D3B34E00522360CE00A46B500 Authority key identifier: 7C:B2:28:84:FD:D0:5B:14:8E:FD:87:34:FD:A6:13:FA:CC:39:26:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 68 IP address blocks: 128.165.0.0/16 maxlen: 16 130.55.0.0/16 maxlen: 16 138.98.0.0/16 maxlen: 16 141.111.0.0/16 maxlen: 16 192.12.184.0/24 maxlen: 24 192.12.208.0/24 maxlen: 24 192.43.188.0/24 maxlen: 24 192.52.70.0/24 maxlen: 24 192.65.95.0/24 maxlen: 24 204.121.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:e0:05:22:36:0c:e0:0a:46:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e2da88f-6029-42b9-b598-2623343a3150 Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=59aed8fa-0662-4da6-95b5-49736ee979e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:11:7d:61:d6:d0:1d:02:5d:45:d3:30:77:5e: 40:9f:5f:59:8c:50:88:eb:d7:a1:38:fa:8c:f7:a5: d3:20:94:f3:10:e7:13:97:7b:44:ad:c6:2a:db:b1: 3a:5b:2f:f9:a1:3c:8c:e1:cf:01:00:7d:67:b9:6e: b4:f0:5c:0a:36:a8:2f:96:35:fd:48:08:be:4d:12: fc:a8:12:48:83:97:e7:a4:db:3f:d6:e3:82:06:ff: 30:95:e2:b6:3d:54:e2:56:79:5a:b0:9e:31:2f:40: 71:b7:bd:45:89:02:e0:bd:3b:81:23:3a:ec:0f:fd: 84:9c:ce:af:41:86:e0:f0:74:f3:49:15:c4:fc:ec: 10:5d:a3:91:94:e0:fd:56:ab:cd:d3:9f:02:8b:76: f3:5c:bb:f0:44:29:b7:43:36:49:27:8e:af:57:70: 3d:6b:cf:50:bd:c2:2a:a9:af:83:b8:ff:b2:48:5a: 3b:15:89:95:d7:9d:a3:1d:88:51:af:ad:36:29:19: 7d:42:6d:a4:84:36:f7:1b:b5:91:ff:7a:44:d7:22: 20:a5:a3:33:c8:15:4a:de:6d:ed:8f:da:fa:fa:69: 8d:a2:32:38:98:af:54:7e:d4:ec:05:0c:7d:c4:71: e2:c4:02:af:3f:36:5e:b8:8e:62:03:d4:d4:dc:a7: a7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2A:8D:76:80:AC:C0:0D:F3:69:66:94:B0:D6:A1:9E:0D:64:7C:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.crl X509v3 Authority Key Identifier: keyid:7C:B2:28:84:FD:D0:5B:14:8E:FD:87:34:FD:A6:13:FA:CC:39:26:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150.cer sbgp-ipAddrBlock: critical IPv4: 128.165.0.0/16 130.55.0.0/16 138.98.0.0/16 141.111.0.0/16 192.12.184.0/24 192.12.208.0/24 192.43.188.0/24 192.52.70.0/24 192.65.95.0/24 204.121.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:99:d6:6e:e6:55:c3:6b:89:5d:37:06:38:c4:87:d6:94:c6: b1:aa:a9:09:ac:79:23:3b:63:29:08:a5:34:2a:29:34:7e:c2: eb:84:80:09:70:f6:03:d0:80:19:ed:cd:49:92:01:16:ea:73: 80:f9:4e:c5:2b:5b:a2:d9:1f:78:be:a5:0a:99:95:f7:ac:21: e2:ac:cb:8b:b4:da:30:bc:8b:ee:e0:11:a8:97:51:81:46:d9: a2:92:86:1d:8a:01:01:e8:4e:21:ba:da:4c:57:19:77:a5:40: dd:e1:b8:7e:a4:3b:0d:8e:2e:42:aa:52:7b:4a:fd:87:ca:61: 1e:2d:3d:93:3a:53:d2:7c:eb:3c:83:3a:1e:40:93:c6:1d:45: ae:b9:a7:91:18:d5:6e:da:fa:42:71:89:3d:b1:7a:3e:08:94: 69:16:9f:5c:7e:08:09:7d:f7:e3:49:92:c9:0c:68:36:d2:0f: a3:cb:05:1b:69:51:87:f1:00:68:15:bc:71:f6:db:cc:d7:25: c7:ac:57:82:9d:be:f2:b9:80:b5:94:4b:5d:7f:63:35:e1:24: 0d:ff:89:4c:5e:e1:95:26:0d:c6:66:16:78:d2:da:f3:e5:ed: 9d:cf:57:3e:4a:ac:a4:26:f2:79:9f:75:16:ee:26:78:32:5c: bf:f6:e6:eb -----BEGIN CERTIFICATE----- MIIGdDCCBVygAwIBAgIUAQ0Mn0MoWE07NOAFIjYM4ApGtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWUyZGE4OGYtNjAyOS00MmI5LWI1OTgtMjYyMzM0M2Ez MTUwMB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk NTlhZWQ4ZmEtMDY2Mi00ZGE2LTk1YjUtNDk3MzZlZTk3OWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BF9YdbQHQJdRdMwd15An19ZjFCI69ehOPqM 96XTIJTzEOcTl3tErcYq27E6Wy/5oTyM4c8BAH1nuW608FwKNqgvljX9SAi+TRL8 qBJIg5fnpNs/1uOCBv8wleK2PVTiVnlasJ4xL0Bxt71FiQLgvTuBIzrsD/2EnM6v QYbg8HTzSRXE/OwQXaORlOD9VqvN058Ci3bzXLvwRCm3QzZJJ46vV3A9a89QvcIq qa+DuP+ySFo7FYmV152jHYhRr602KRl9Qm2khDb3G7WR/3pE1yIgpaMzyBVK3m3t j9r6+mmNojI4mK9UftTsBQx9xHHixAKvPzZeuI5iA9TU3KenoQIDAQABo4IDhjCC A4IwHQYDVR0OBBYEFJ0qjXaArMAN82lmlLDWoZ4NZHw9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZTJk YTg4Zi02MDI5LTQyYjktYjU5OC0yNjIzMzQzYTMxNTAvOGFiOTI0NjctMWMwYi0z OGViLWI5MzAtYWE0YWQzOWU2Y2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWUyZGE4OGYtNjAyOS00MmI5LWI1 OTgtMjYyMzM0M2EzMTUwLzVlMmRhODhmLTYwMjktNDJiOS1iNTk4LTI2MjMzNDNh MzE1MC5jcmwwHwYDVR0jBBgwFoAUfLIohP3QWxSO/Yc0/aYT+sw5JrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZTJkYTg4Zi02MDI5LTQyYjktYjU5OC0yNjIz MzQzYTMxNTAuY2VyMFAGCCsGAQUFBwEHAQH/BEEwPzA9BAIAATA3AwMAgKUDAwCC NwMDAIpiAwMAjW8DBADADLgDBADADNADBADAK7wDBADANEYDBADAQV8DAwDMeTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBdmdZu5lXDa4ldNwY4xIfWlMaxqqkJrHkjO2MpCKU0Kik0fsLrhIAJ cPYD0IAZ7c1JkgEW6nOA+U7FK1ui2R94vqUKmZX3rCHirMuLtNowvIvu4BGol1GB RtmikoYdigEB6E4hutpMVxl3pUDd4bh+pDsNji5CqlJ7Sv2HymEeLT2TOlPSfOs8 gzoeQJPGHUWuuaeRGNVu2vpCcYk9sXo+CJRpFp9cfggJfffjSZLJDGg20g+jywUb aVGH8QBoFbxx9tvM1yXHrFeCnb7yuYC1lEtdf2M14SQN/4lMXuGVJg3GZhZ40trz 5e2dz1c+SqykJvJ5n3UW7iZ4Mly/9ubr -----END CERTIFICATE-----Generated at Thu Mar 26 17:04:07 2026 by rpki-client